Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/CB1XIlnWTc14SauCzXUS_UmOJC4.roa
File: CB1XIlnWTc14SauCzXUS_UmOJC4.roa (raw, json)
Hash identifier: byg5QgaOPMhnjlQf7GrI3dWBQ3YWuvGS0ozt2rOo0p8=
Subject key identifier: 08:1D:57:22:59:D6:4D:CD:78:49:AB:82:CD:75:12:FD:49:8E:24:2E
Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Certificate serial: 01A1ACA2F8C81228AAFFC081C98ABADF32DD
Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/CB1XIlnWTc14SauCzXUS_UmOJC4.roa
Signing time: Thu 05 Nov 2026 16:55:24 +0000
ROA not before: Thu 05 Nov 2026 16:55:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210782
IP address blocks: 2a07:cec0:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ac:a2:f8:c8:12:28:aa:ff:c0:81:c9:8a:ba:df:32:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Validity
Not Before: Nov 5 16:55:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=081d572259d64dcd7849ab82cd7512fd498e242e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3f:65:48:0b:2e:0f:6b:b8:83:4f:1c:3e:1a:
e9:33:cf:07:2c:ed:ba:bf:8f:79:ba:be:86:4c:7e:
7f:83:c0:9c:a3:95:a9:ab:f6:27:7e:43:40:4e:03:
20:7a:21:c8:5b:57:14:00:fc:62:f0:5d:d8:c6:3f:
ee:3c:83:f6:49:2e:7a:ec:9a:df:a1:9b:32:1d:87:
61:21:6e:02:c3:a2:9e:24:ac:63:9e:f5:c6:b4:a2:
f5:af:ed:9c:c9:26:f0:3b:96:8b:22:67:55:f6:f9:
b8:c2:f7:47:66:c3:da:3a:00:c9:8d:68:ca:4c:26:
c8:9e:5a:cb:ce:9d:83:0f:17:14:cf:87:52:e2:dd:
5d:13:04:fa:de:0e:97:28:bd:6f:3c:c3:9a:78:0b:
8c:a0:18:9a:16:56:1d:d0:26:1a:d0:a7:da:7f:e2:
c3:b0:c7:af:5f:db:46:f4:85:3b:24:1d:4e:78:b6:
3a:bb:09:1d:19:50:55:88:f7:1c:d9:31:7a:1b:ad:
e1:89:9f:10:60:5b:7a:4a:5c:40:00:17:fb:cb:fd:
21:f6:dc:71:55:fb:6e:62:ea:db:2d:b3:6d:37:23:
f4:12:b6:eb:8b:fb:48:7b:66:40:2b:c7:c5:22:62:
99:bb:d4:29:73:cd:cb:0e:d6:9e:b4:2c:02:23:87:
87:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1D:57:22:59:D6:4D:CD:78:49:AB:82:CD:75:12:FD:49:8E:24:2E
X509v3 Authority Key Identifier:
keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/CB1XIlnWTc14SauCzXUS_UmOJC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:cec0:8::/48
Signature Algorithm: sha256WithRSAEncryption
3f:1e:30:d5:86:b9:a8:22:3e:17:e6:45:43:30:d3:84:4f:9d:
e1:38:50:46:9b:42:95:0b:1a:5b:ef:99:bd:ab:b6:5e:cc:50:
54:d1:71:2a:bd:c9:b1:2e:4b:07:72:53:67:28:bc:2a:b7:17:
90:2c:5a:ac:e5:e7:9c:ae:2d:3e:30:95:94:18:86:1c:21:1b:
a6:85:c5:75:07:07:8e:83:6a:05:43:33:6c:8b:24:ac:99:e9:
73:00:48:1f:a6:31:a7:d8:71:e6:13:67:2c:62:78:9f:22:28:
91:06:91:9b:da:3d:7a:ad:54:55:e1:0b:cd:b0:5f:d0:1f:e7:
a7:da:0c:6f:6f:34:71:d8:4c:a6:91:83:23:3b:4c:f0:20:b6:
de:4f:96:3d:65:05:cd:2a:4e:ae:87:3b:63:33:88:fb:fc:ab:
c6:7d:f3:c8:9b:15:d1:7a:f0:e2:3f:8d:44:7c:dd:2b:05:df:
12:d7:87:29:d7:f4:0c:84:07:91:bc:e2:60:3f:02:cd:a8:5c:
67:70:aa:6e:5d:bb:d3:e0:4d:da:fe:41:7d:16:c8:41:2d:4a:
62:92:1c:3a:9f:c1:e1:82:33:4c:bf:da:49:2b:dd:bc:a2:a7:
f6:d2:09:da:e7:35:f6:21:0c:87:df:ad:47:3c:84:1a:93:10:
68:7d:81:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 06:59:46 2026 by rpki-client